Privacy Policy
In the following we would like to inform you about the types of data processed by Ynot Car Hire and about the purposes of such data processing. We would also like to inform you about important legal aspects of data protection, such as your rights.
A: Data controller The party responsible for processing your data (controller) is Auto rent III (hereinafter also referred to as Ynot Car Hire). If you have any questions regarding data protection, please address your query to the following email address: info@ynotcarhire.com
B: Categories of personal data The following categories of personal data may be processed by us in connection with our services:
• Master data: These include, for example, a person’s first name, surname, address (private and/or business), date of birth.
• Communication data: These include, for example, a person’s telephone number, email address (private and/or business) fax number if applicable, as well as the content of communications (e.g. emails, letters, faxes).
• Contract data: These include, for example, the rental information (vehicle category, pick-up and return dates, pick-up and return branch, booked extras/services), rental contract number, reservation number, driver’s licence data, driver’s licence photograph, license plates of the vehicle you rented, and information on customer loyalty and partner programmes.
• Financial data such as credit card data.
• Voluntary data: These are data that you provide to us on a voluntary basis, without us having explicitly requested them, and include information such as your preferences with regard to the vehicle’s equipment and category.
• Special data categories: In the event of an accident, damage to the vehicle, or similar incidents, we process data relating to the respective course of events and the damage incurred. These data may be provided by customers, passengers or injured parties. The data processed in such circumstances can include health-related data such as data on injuries, blood alcohol levels, driving under the influence of narcotic substances, and the like.
• Third-party data: If, within the scope of your vehicle rental, you provided us with personal data of third parties (e.g. family members, second drivers, passengers), then we will also process these data.
• Location data: Location data are data that we may process when a vehicle is equipped with telematics (cf. → connected vehicles).
C: The legal basis for data processing at Ynot Car Hire Art. 6 (1) sentence 1 point a) of the General Data Protection Regulation (GDPR): Pursuant to this provision, the processing of your personal data is lawful if and to the extent that you have given your consent to such processing. Art. 6 (1) sentence 1 point b) GDPR: Pursuant to this provision, the processing of your personal data is lawful if such processing is necessary for the performance of a contract to which you are party, or in order to take steps at your request prior to entering into a contract (e.g. when making the vehicle reservation). Art. 6 (1) sentence 1 point c) GDPR: Pursuant to this provision, the processing of your personal data is lawful if such processing is necessary for compliance with a legal obligation to which Ynot Car Hire is subject. Art. 6 (1) sentence 1 point f) GDPR: Pursuant to this provision, the processing of your personal data is lawful if such processing is necessary for the purposes of the legitimate interests pursued by the controller, i.e., Ynot Car Hire, or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, i.e., you yourself. Art. 9 (2) point f) GDPR: Pursuant to this provision, certain special categories of personal data can be processed if such processing is necessary for the establishment, exercise or defence of legal claims. These special categories of personal data include the health data of the data subjects.
D: The purposes of data processing at Ynot Car Hire Reserving and renting vehicles Purposes of data processing We process your master data, communication data, contract data, financial data and any data you have provided voluntarily for purposes of implementing your reservations and facilitating the conclusion and performance of your rental contract.
Privacy policy Page 3 We moreover use the master data, communication data and contract data for customer relations purposes, for example to handle any complaints or changes of reservation that you contact us about. If you book your vehicle via travel agencies, online travel agencies or other agents, then your master data, communication data, rental information and, if applicable, financial information, will be transferred to us by our partners. We also use your master data and contract data for purposes of settling accounts (e.g. commissions and sales processing) with, for example, travel agencies, other agencies, franchise partners and cooperation partners. In order to be able to fulfil your reservation request, we transfer your data to partner companies in the event that we do not have the requested vehicle or vehicle type available. We are furthermore legally obliged – for purposes of preventing and investigating criminal offences – to compare your master and communication data with official perpetrator lists provided to us. Such comparisons also serve to ward off dangers and to facilitate prosecution by the state authorities. We furthermore use your data for your and our security, for example to avoid payment defaults and to prevent property offences (in particular fraud, theft, embezzlement). In some rental branches we use a technology that verifies the authenticity of ID documents (especially driver’s licence) and records the data electronically instead of manually. If you request to pay for your rental by invoice, then we process your master and financial data in order to assess your creditworthiness by obtaining the corresponding information from credit agencies. Once both contracting parties have fulfilled their obligations under the rental contract, your master data, financial and contract data will be stored until the statutory retention period expires.
Legal basis for the above processing Art. 6 (1) sentence 1 point b) GDPR applies to the processing of data to the extent required to implement reservations, to conclude and perform contracts and for customer relations purposes. Art. 6 (1) sentence 1 point f) GDPR applies to the processing of data to the extent required to settle accounts vis-à-vis third parties, to assert our own claims, and to mitigate risks and prevent fraud. Art. 6 (1) sentence 1 point c) GDPR applies to the processing of data to the extent required to detect, prevent and investigate criminal offences, to examine and store driver’s licence data, and to comply with preservation periods under commercial and tax law. Legitimate interest, to the extent that Art. 6 (1) point f) GDPR applies to the type of processing concerned Our legitimate interests in using your personal data to improve our services and customer services lie in the fact that we want to offer you the best possible services and to sustainably improve customer satisfaction. To the extent that data processing is required to perform analyses with a view to preventing damage to our company and our vehicles, our legitimate interests lie in maintaining security for costs and preventing economic disadvantages such as those arising from nonpayment or the loss of our vehicles.
Categories of recipients
For the purposes described in the foregoing (especially for informing the local rental partner about a reservation or for processing of credit card payments with your credit card company), we disclose your data to the following recipients: IT service providers, call centres, collection companies, financial services providers, credit agencies, Ynot Car Hire group companies, cooperation and agency partners and franchise partners. As part of our measures to prevent fraud, we also transmit – in situations where third parties have been, or are at risk of being, defrauded – personal data to such third parties having suffered, or at risk of, fraud.
Marketing and direct advertising
Purposes of data processing
We process your master data, communication data and contract data for purposes of promoting customer loyalty, implementing customer loyalty and bonus programmes (including our own and those of our cooperation partners), optimising customer offers, market or public opinion research as well as holding customer events (see also → Events and donations). You may object to any processing or use of your data for direct marketing purposes at any time. Please send any objections to: Auto rent III Rent-a-Car, aluguer de automóveis, Rua Central de Mouriz, 464 4580-590 Paredes or via email to: customer.service@ynotcarhire.com
Legal basis for processing
Art. 6 (1) point a) GDPR applies to data processing for purposes of implementing direct marketing measures that require explicit prior consent. Art. 6 (1) point f) GDPR applies to data processing for purposes of implementing direct marketing measures that do not require explicit prior consent, and of implementing the marketing measures mentioned (→ Purposes of data processing).
Privacy policy Page 4 Legitimate interest, to the extent that Art. 6 (1) point f) GDPR applies to the type of processing concerned Our legitimate interests in using your personal data for purposes of implementing direct marketing measures and the marketing measures mentioned lie in the fact that we want to convince you of our services and promote a lasting customer relationship with you. Categories of recipients For the purposes described in the foregoing, we disclose your data to IT service providers, call centres, advertising partners and providers of customer loyalty and bonus programmes.